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[57] ABSTRACT 

An encrypting device for an input data bit sequence 
comprises a shift register for producing a bit pattern 
represented by successive encrypted bits for the data 
bits preceding a current bit. A bit pattern converter 
selects in compliance with the bit pattern a bit of a code 
pattern preset therein. A keying bit may be provided by 
the selected bit, to which the current bit is added mod- 
ulo two to produce a new encrypted bit For more 
excellent encryption, the successively selected bits may 
be used to produce an additional bit pattern, responsive 
to which either the keying bit or an additional keying 
bit, to be also added to the current bit, may be provided 
by a selected bit of another code pattern. Each bit pat- 
tern converter may be preset with a plurality of code 
patterns. One or more encrypting devices may be used 
in encrypting a sequence of input data digits, each com- 
prising a plurality of input data bits among which at 
least one bit may be a dummy bit. A decrypting device 
should have a structure corresponding to the counter- 
part encrypting device. 

24 Claims, 9 Drawing Figures 
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. According to this invention, there is provided an 

DEVICE FOR ENCRYPTING EACH INPUT DATA encrypting device for encrypting a sequence of input 
BIT BY AT LEAST ONE KEYING BIT DECIDED BY data bits into a sequence of encrypted bits in response to 
A CODE PATTERN AND A BIT PATTERN OF A a sequence of clock pulses timing the input data bits and 
PREDETERMINED NUMBER OF PRECEDING 5 the encrypted bits with a predetermined clock period. 

ENCRYPTED BITS A memory means is responsive to the clock pulses for 

memorizing a predetermined number m of the en- 
BACKGROUND OP THE INVENTION crypted bits during each clock period to produce a 

This invention relates to an encrypting device for use tn memory output bit pattern represented by the m en- 
either in transmitting or recording a digttal signal, such 10 blt . s memorized therem. A bit pattern convert- 

as a PCM signal, wiUi each digit encrypted. This inven- m « * «*P°*»ve to^at least one code pattern for 
tion relates also to a decrypting device for use in combi- ? on ? memory output bit pattern to a leas one 
nation with the encrypting device. keym8 ^ A mod " lo - t t w .° add i n * means calculates a 

It is possible to provide an excellent encrypting and „ ? um . °"^? tW °S "iTf ^ brt f ^ at Ie ff K °. ne 

Jm 15, 1977 as FIPS PUB (Federal Information Pro- « ? , r f u ' ,* T: 

cessing Standards Publication) by the National™- J^^^^^ vMemvMbuuy 

reau of Standards of the United States Department of a , 4 , A . . . 

*~ \T , , , , ™,vT , p . , ^ " . According to an embodiment of this invention, at 

Commerce (hereafter caUed the DBS algorithm). Six- M least one ^ pattcrn k at least ^ m number ^ * 

teen iterations of a calculation are, however, necessary ^ yen b a ra ^ ^ one addidonal 

on encrypting j^y-four-bit input data ^to saty-four- ^ ^ ^ abo F ve _mentioned bit ^ 

bit encrypted dfcta with the iteratioiis preceded by an ^ ^ ^ a Uflit bit patter Tconverter for 

initid permutotoon and followed by the inverse of the ^ ping ^ ttern m £ for producing a con . 

im nal permutation. The .encrypted data are therefore ^ verted bit responsive t0 the memory output bit pattern. 

obtained with an appreciable delay In addition, syn- A wodao ^ m adder calculates a sum modulo two of 

chromsm must be kept for the sixty-four bits, the converted bit and the encrypted bit produced by the 

An ^encrypting ^and decryptmg system jevealed in means during each of ^ above-described clock 

US. Pat, No. 4,172,213 issued to Vera L. Barnes et al, to produce a fium bit ^ by ^ sum 

assignors to Burroughs Corporation, makes use or a ^ Iated by ^ adder . A shift register means is responsive 

DBS chip, namely, a chip for the DES algonthm. Con- t0 ^ dock pulses ^piied thereto as shift pulses for 

sequently, the system according to Barnes et al is not retaining, during each clock period, a prescribed num- 

devoid of the inconveniences inherent to the DES algo- 0 f ^ e sum b j te w hich are successively produced by 

rithm. the adder, to produce a shift register bit pattern repre- 

It is possible to provide an encrypting and decrypting 35 sented by u, e sum b i te retained therein. An additional 
system by resorting to the scrambling and descrambling b j t pattern converting means is responsive to at least 
technique, in which a maximal-length sequence genera- 0tte additional code pattern for converting the shift 
tor is used. An example is disclosed in an article contrib- register bit pattern to at least one keying bit. 
uted by J. E. Savage to "The Bell System Technical when viewed differently, an encrypting device ac- 
Journal," Vol. XLVI, No. 2 (February 1969), pages 40 cording to the above-described embodiment is an en- 
449-487, under the title of "Some Simple Self-Synchro- crypting device comprising modulo-two adding means 
nizing Digital Data Scramblers." Only a few number of f or calculating a first sum modulo two of each en- 
keys are, however, available for encryption and decryp- crypted bit and an adding means input bit and a second 
tion. Furthermore, deciphering is possible even for an sum modulo two of each input data bit and at least one 
unauthorized recipient by analyzing a relatively small 45 keying bit to produce a sum bit given by the first sum 
number of encrypted bfts, such as 2m hits, where m and the sequence of encrypted bits with each encrypted 
represents the number of stages of a shift register used in bit given by the second sum. A shift register means is 
the maximal-length sequence generator. responsive to the clock pulses supplied thereto as shift 

SUMMARY OF THE INVENTION ^J^^J^^^^ 

It is therefore an object of the present invention to scribed number m' of the sum bits successively pro- 
provide an encrypting device, by which input data duced by the adding means to produce a unit and an 
digits are encrypted with a least possible delay. additional shift register bit pattern represented by the ra 

It is another object of this invention to provide an encrypted bits retained therein and the m' sum bits re- 
encrypting device of the type described, for which no 35 tained therein, respectively. A bit pattern converting 
spurious digits are necessary for synchronization. means is responsive to a unit code pattern for convert- 

It is still another object of this invention to provide an ing the unit shift register bit pattern to a unit converted 
encrypting device of the type described, to which a bit and responsive to at least one additional code pattern 
great number of keys are available for encryption and for converting the additional shift register bit pattern to 
decryption. 60 at least one additional converted bit, and means for 

It is yet another object of this invention to provide an supplying the unit and at least one additional converted 
encrypting device of the type described, with which it bits to the adding means as the adding means input bit 
is possible to produce an encrypted digit sequence that and the at least one keying bit, respectively, 
is difficult for an unauthorized recipient to decrypt or It is now readily possible to use one or more encrypt- 
decipher. 65 ing devices of the type described, for encryption of an 

It is a further object of this invention to provide a input data digit sequence, where each digit is given by 
decrypting device for use as a counterpart of such an a plurality of parallel and/or series input data bits. Such 
encrypting device. an input data digit sequence is readily obtained by the 
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use of a dummy bit even from a more general input data FIG. 6 is a block diagram of an encrypting device 

digit sequence having three or a like number of levels. according to a fourth embodiment of this invention; 

According to an aspect of this invention, there is FIG. 7 is a block diagram of a decrypting device for 

provided an encrypting device for encrypting a se- use in combination with the encrypting device shown in 

quence of input data digit into a sequence of encrypted 5 FIG. 6; 

digits in response to a sequence of clock pulses timing FIG. 8 is a block diagram of an encrypting device 

the input data digits and the encrypted digits with a according to a fifth embodiment of this invention; and 

predetermined clock period. Each input data digit com- FIG. 9 is a block diagram of a decrypting device for 

prises a first and a second input data bit. Each encrypted use in decrypting an encrypted digit sequence produced 

digit comprises a first and a second encrypted bit. The 10 by the encrypting device illustrated in FIG. 8. 

device according to this aspect of this invention com- r^cz-^TtrrTi™ 

prises modulo-two adding means for calculating a first DESCRIPTION OF THE PREFERRED 
sum modulo two of each first input data bit and at least EMBODIMENTS 
one keying bit to produce a sequence of the first en- Referring to FIG. 1, an encrypting device according 
crypted bits with each first encrypted bit given by the 15 to a first embodiment of the present invention is for 
first sum, a second sum modulo two of each second encrypting a sequence of input data bits into a sequence 
input data bit, the at least one keying bit, each first of original encrypted bits in response to a sequence of 
encrypted bit, and a first and a second adding means encryption clock pulses of a predetermined encryption 
input bit to produce a sequence of the second encrypted clock period. Each of the input data bits and the en- 
bits with each second encrypted bit given by the second 20 crypted bits is capable of taking either of binary zero 
sum, and a third and a fourth sum modulo two of each and one at each clock period. When desired, the input 
first encrypted bit and the first and the second adding data bit and the original encrypted bit at each clock 
means input bits to produce a first and a second adding period t, will be designated by a/ and b ty respectively, 
means output bit given by the third and the fourth sums, The input data bit sequence and the original encrypted 
respectively, shift register means responsive to the 25 bit sequence will be denoted by {aj and {bj, respec- 
clock pulses supplied thereto as shift pulses for retain- tively. 

ing, during each clock period, a predetermined number A device input terminal 11 is supplied with the input 
m of the second encrypted bits, a first prescribed num- . data bit sequence. A feedback line 12 is supplied with a 
ber mi of the first adding means output bits successively preselected number s of sequences of encryption keying 
produced by the adding means, and a second prescribed 30 bits as will presently be described. Unity may be se- 
n umber ni2 of the second adding means output bits sue- lected as the preselected number. When two is selected 
cessively produced by the adding means to produce a as the preselected number, the feedback line 12 is sub- 
unit and a first and a second additional shift register bit stanttally simultaneously supplied with two keying bits 
pattern represented by the m second encrypted bits and of the respective sequences during each clock period, 
the mi first and the m2 second adding means output bits 35 Such, one or more keying bits will collectively be de- 
retained therein, respectively, bit pattern converting noted by k,. An encryption adder 13 is for calculating a 
means responsive to a unit and a first and at least one sum modulo two of each input data bit a/ supplied from 
second additional code pattern for converting the unit die input terminal 11 and the one or more keying bits k f 
and the first and the second additional shift register bit concurrently supplied from the feedback line 12. The 
patterns to a unit and a first and at least one second 40 modulus of two is used, irrespective of the preselected 
additional converted bit, respectively, and means for number. The adder 13 produces the encrypted bit se- 
supplying the unit and the first and the at least one quence, with each encrypted bit b/ given by the sum. 
second additional converted bits to the adding means as The encrypted bit sequence is delivered to a device 
the first and the second adding means input bits and the output line 14 and thence to a transmission line 15. Al- 
at least one keying bit, respectively. 45 tentatively, the encrypted bit sequence may be supplied 
According to this invention, there is also provided a to a recording medium, as of a magnetic disk or drum, 
decrypting device for decrypting the encrypted bit or to be recorded thereon. 

digit sequence produced by the encrypting device of The encrypted bit sequence is supplied also to an 

the type described, into a sequence of decrypted bits or input terminal of an encryption shift register 16 having 

digits by the use of a sequence of local clock pulses of 50 a predetermined number m of stages. The shift register 

the predetermined clock period. stages will be named first through (m— l>th and m-th 

BRIEF DESCRIPTION OF THE DRAWING Z^S^X^Z^^^S 

FIG. 1 shows in blocks an encrypting device accord- ter stage has a stage output terminal. The clock pulses 

ing to a first embodiment of the instant invention to- 55 are used as shift pulses for the shift register 16. During 

gether with a decrypting device for use in combination each clock period, the shift register 16 simultaneously 

with the encrypting device to form an encrypting and produces the contents of the respective stages, namely, 

decrypting system; a set of m successive encrypted bits memorized in the 

FIG. 2 is a block diagram of an encrypting device respective stages, as first through (m— l)-th and m-th 

according to a second embodiment of this invention; 60 encryption output signals. In other words, the shift 

FIG. 3 is a block diagram of a decrypting device for register 16 distributes the encrypted bit sequence into m 

use in decrypting an encrypted bit sequence produced parallel sequences of the encrypted bits, 

by the encrypting device depicted in FIG. 2; As will become clear as the description proceeds, it is 

FIG. 4 is a block diagram of an encrypting device possible to define an encryption memory output bit 

according to a third embodiment of this invention; 65 pattern by each set of the first through the m-th output 

FIG. 5 is a block diagram of a decrypting device for signals simultaneously produced by the shift register 16. 

use as a counterpart of the encrypting device illustrated The parallel encrypted bit sequences are indicative of a 

in FIG. 4; sequence of successive encryption memory output bit 
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patterns. The memory output bit pattern may be defined 1 and 0. When the predetermined permutation is (1 11) 

by the first through the m-th output signals arranged to make the index number j give eight, the keying bits 

according to the ordinal numbers, such as from the first are two eighth bits 0 and 1. 

to the m-th output signals. For such a predetermined . More in general, let first through s-th unit code pat- 
permutation of the memorized bits, the greatest possible 5 terns Ki through K s of such a pattern length M be: 
number, designated by M, of different memory output 

bit patterns amounts to 2* In any event, it is possible to K ( . i . j , , 

discriminate the memory output bit patterns from one l ~ w> ■ l h 

another by a plurality of indices, M in number, allotted K 2 - (ttf, k\ 2 , .... k M -\ 2 ), 

to the different memory output bit patterns, respec- io 

tively. 1 .... and 

An encryption bit pattern converter 17 is peliminarily K _ (Jfe - k , k « 

supplied with at least one code pattern, s in number, to * 1 M ~ 

keep the at least one code pattern The code pattern or where each of ^ k , d k „_ lJrepresents a code 

tSZ^^ 15 Patten! bit of eithW bW ^ro or binarV one. On the 

bit pattern converter 17 either manually or otherwise as ^wwh QC ;«„i Q ^«o^ir«p»t. a ** Y "? 
symbolically indicate by a pattern le/d 18. Each code T^'^I^SV^T^ 1 ^ 
pattern is for specifying an encryption keying bit ac- ' WAU ^" © ,vc " w /- 

cording to each memory output bit pattern or each 

index. It is therefore possible to understand that each 20 K = ^ ® *° 2 ® • • * ® ^ 
code pattern defines a feedback function. The same ^1 ^ h i ^ ^ fc ^ 

keying bit may be specified by different ones of the 

memory output bit patterns. Responsive to the succes- © *Af-i 2 © ... © JW-i*)}. 

sive memory output bit patterns, the bit pattern con- 
verter 17 supplies the feedback line 12 with the s keying 25 where the symbol 0 represents a summation modulo 
bit or bits depending on each memory ouput bit pattern two. If preset with the single code pattern, the bit pat- 
or each index and the s preset code patterns K. It is tern converter 17 supplies the adder 13 with a single 
readily possible to implement such a bit pattern con- encryption keying bit in response to each memory out- 
verter either by a read-only memory usually abbrevi- put bit pattern or each index. An original encrypted bit 
ated to ROM in the art or a microprocessor. 30 sequence produced by addition of the input data bit 

By way of example, let each encryption memory sequence and the single keying bit sequence modulo 
output bit pattern define a binary number i by: two is identical with the original encrypted bit sequence 

produced in response to the s keying bit sequences* The 
i=ho+bi.2-fb2.2 +. . . +b m -iO« , s preset p atterns Kl through Kjare therefore 

, , , , , „ , 35 equivalent to the single code pattern K. 

where bo, bi, . , and b M _, are representative of the It however, be as will shortly be discussed that 

first through the m-th encryption output ^signals, an encryption bit pattern converter for two or more unit 

**** ^.^^Ptcd bus produced dunng a ^ tterns ^ tion bit ^ m con . 

^Tth n ^ P ? Cl0 ? ff pen ° d , fr0m the first ^ 0u f h verter for the single code patteri defined £ above, are 
^^^^T^S^ rCSpeCtlvdy ; 40 different from each other » regards hardware. It has 

binary numbers i s. The index number is variable be- b «. *. *t. 1 u *t. 1 * j 

« a nm -ka t* • *u * *i. • j- Revertmg to the example where the preselected num- 

tween one and 2 m or M. It is unnecessary that the indi- u c : a i-* ««J 1 « a ** ^ v 

ces be identified by such natural numbers. 45 ' " ^ ™$ second urat ^ P atterns 1 

It is preferred that each code pattern consists of first fobe more generally: 

through M-th code pattern bits of a pattern length equal 

to the greatest possible number M. When the index *i ~ (*<> *i, . . . , k M /2-i, 

takes an index number j, the bit pattern converter 17 ^ k] JW/2-1) and 

may produce the j-th bit of each code pattern as an 50 

encryption keying bit. &z = (0. 0. . . . , a 1, 1 1), 

For instance, let first and second unit code patterns 

Ki and K2 preset in the bit pattern converter 17 be: respectively. The first code pattern is given by a concat- 
enation of two code patterns, each having a pattern 

Ki-(onoono) 55 length equal to M/2 or 2 m - 1 bits. In the second code 

pattern, the number of binary zeros and the number of 

and binary ones are equal to each other, namely, to M/2. 



K 2 =(00001111X 



The single code pattern K becomes: 



60 

assuming that the predetermined number m is three for 
brevity of description. When the predetermined permu- (*j © IX ... . <*jim-i © D>. 
tation of the memorized bits of the encrypted bit se- 
quence is (000) to render the index number j equal to With a bit pattern converter for the two code patterns 
unity, the keying bits are two first bits of the respective 65 Ki and K2, a first keying bit produced in response to the 
unit code patterns, namely, 0 and 0. When the predeter- first code pattern is dependent only on the first through 
mined permutation is (100) to make the index number j the (m— l)-th output signals bo to b m -2 simultaneously 
take a value of two, the keying bits are two second bits produced by the shift register 16 and is independent on 
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the m-th output signal b m _i. A second keying bit pro- stantial equivalency between a single code pattern and 
duced in response to the second code pattern is identical two or more unit code patterns, the greatest possible 
with the m-th output signal b m _i. It is therefore possi- number of different code patterns is equal to 2 J t where 
ble to implement the bit pattern converter by an ROM J represents the greatest possible number of different 
of a half number of memory bits as compared with 5 memory output bit patterns. For the encrypting device 
another bit pattern converter for the single code pattern of FIG. 1, the latter greatest possible number J is equal 
K. The former bit pattern converter is more readily to M. For the encrypting device of FIG. 2, the latter 
implemented than the latter bit pattern converter. This greatest possible number J is equal to M/2. In the latter 
applies to bit pattern converters comprising micro- case, the greatest possible number of different code 
processors. 10 patterns is as great as 2 8 or 256 even when only four is 
Turning to FIG. 2 for a short while, an encrypting selected as the predetermined number m. In a conven- 
device according to a second embodiment of this inven- tional encrypting device with a maximal-length se- 
tion is similar to that illustrated with reference to FIG. quence generator of four shift register stages, the num- 
1, except that two unit code patterns Ki and K2 are ber of keys is only two. It is therefore possible with the 
selected as described above. The feedback line 12 de- IS encrypting device according to this invention to quite 
scribed in conjunction with FIG. 1 is depicted as first astonishingly increase the number of keys, from which 
and second feedback leads 21 and 22. The encryption bit one or a few are selected for use in the encrypting de- 
pattern converter 17 comprises a unit encryption bit vice. 

pattern converter 26 and an encryption conductor 27. It is, however, to be noted that the greatest possible 

The bit pattern converter 26 is preliminarily loaded 20 number J of different code patterns decreases to a cer- 

with the M/2-bit code pattern and is responsive to the tain extent as will later be discussed when the code 

first through the (m— l)-th output signals for supplying patterns are selected so as to have substantially no cross- 

a first encryption keying bit to the first feedback lead 21. correlation. It is nevertheless possible with the encrypt- 

Responsive to the m-th output signal, the conductor 27 ing device illustrated with reference to FIGS. 1 and 2 to 

supplies a second encryption keying bit to the second 25 provide an unexpectedly increased number of keys, 

feedback lead 22. The first and the second keying bits Referring back to FIG. 1, a decrypting device is for 

are equivalent to a single encryption keying bit pro- use as a counterpart of the encrypting device illustrated 

duced in response to the single M-bit code pattern and with reference to that figure. Responsive to a sequence 

a memory output bit pattern composed of the first of local clock pulses of a local clock period equal to the 

through the m-th output signals of the shift register 16. 30 predetermined encryption clock period and responsive 

With an encrypting device illustrated with reference to the encrypted bit sequence which is either received 

to either of FIGS. 1 and 2, each input data bit is en- from the transmission line 15 or reproduced from the 

crypted into an original encrypted bit with a delay equal recording medium and which will be called a sequence 

to that of the adder 13. This is astonishingly shorter than of "receive" encrypted bits, the decrypting device 

the delay that has been necessary with an encrypting 35 supplies a device output terminal 31 with a sequence of 

device according to the DES algorithm referred to decrypted bits that is a reproduction of the input data 

hereinabove. bit sequence. The decrypted bit and the receive en- 

At the start of a new sequence of input data bits, the crypted bit at each clock period t will be designated 
shift register 16 might be loaded with the encrypted bits again by ar and br, respectively. As will presently be 
produced during encryption of a next previous se- 40 described, decryption keying bits K/ of the preselected 
quence of input data bits. This does not adversely affect number s are fed to a feedforward line 32 during each 
proper operation for the new sequence. At any rate, all local clock period. A decryption adder 33 is for calcu- 
possible memory output bit patterns will appear with a lating a sum modulo two of each receive encrypted bit 
common probability during a sufficiently long interval and the decryption keying bit or bits concurrently sup- 
of time. The bit pattern converter 17 therefore produces 45 plied from lie feedforward line 32. The receive en- 
the respective bits of each code pattern with an equal crypted bit sequence is supplied to the adder 33 through 
frequency. Let it now be assumed that unity is selected a device input line 34. The decrypted bit sequence is 
as die preselected number s. This does not result in loss given by a sequence of the sums modulo two. 
of generality in principle as discussed heretobefore. The Besides the decryption adder 33, the receive en- 
bit pattern converter 17 produces each bit of the single 50 crypted bit sequence is supplied to an input terminal of 
code pattern with a frequency dependent on the pattern a decryption shift register 36 of the structure and opera- 
length M. The adder 13 inverts the polarity of the input tion of the encryption shift register 16 used in the coun- 
data bits at a rate equal to a ratio of the number of terpart encrypting device. The decryption memory 
binary one code pattern bits to the pattern length M output bit pattern should be given by that permutation 
expressed in terms of the number of code pattern bits. 55 of the decryption output signals of the shift register 36 

To speak of the encrypting device of FIG. 2 in partic- which is the same as that used on deriving the encryp- 
ular, the ratio mentioned above is equal to 0.5. The tion memory output bit pattern. A decryption bit pat- 
adder 13 therefore produces the encrypted bits with the tern converter 37 is preliminarily loaded with the code 
polarity of a half of the input data bits inverted in the pattern or patterns K, s in number, used in the encryp- 
encrypted bit sequence on the average. This gives an 60 tion bit pattern converter 17. A pattern lead 38 may be 
unexpectedly raised degree of secrecy to the encrypted used on loading the decryption bit pattern converter 37 
bit sequence. with the code pattern or patterns. 

What corresponds in the encrypting devices illus- Reviewing the encrypting device under consider- 

trated with reference to FIGS. 1 and 2 to the key as ation, it is possible to denote the original encrypted bits 

called in the art, is the at least one code pattern preset in 65 retained in the first through the m-th stages of the shift 

the bit pattern converter 17. As the case may be, the at register 16 when an input data bit & t is supplied to the 

least one unit code pattern is preset in the unit bit pat- encryption adder 13, as a current input data bit, by: 
tern converter 26. In view of the above-discussed sub- 
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,. , _ The encryption keying bit produced by the encryp- 

respecravely. pe encryption keying bit or bits deliv tion bit pattern converter 17 according to the illustrated 
ered to the adder 13, are k,. An original encrypted bit b, example during a clock period t in response to an en- 
produced at this instant is therefore given by: 5 crypt ion memory output bit pattern of the binary num- 
b =a{Bk berl, is the Ci+l)-th correct code pattern bit kt which 

,= * will be designated by kj®. The original encrypted bit 

If the original encrypted bit sequence {b,} is supplied Pf 0 ^. * * e «MayP*« adder 13 for an input data 

to the decryption adder 33 and the decryption shift lQ Dlt a,ls gIvcn ^ 

register 36 for the decryption bit pattern converter 37 *i=«i©*K0. 

with no error, the receive encrypted bits retained in the ,= 

first through the m-th decryption stages of the shift ^ decryption memory output bit ^ tteTn produce d 

register 36 are: by ^ decryption shift register 36 when a receive en- 

(b _i, b _i b _ i 15 crv P ted bit b f arrives at the input line 34, are identical 

' ' ' •••»!« with the encryption memory output bit pattern used on 

when a receive encrypted bit b, reaches the decryption Pacing original encrypted bit under consider- 

adder 33 and the decryption shift register 36 through 8tlon \ The decryption keying bit produced by the de- 

the input line 34. It is clear from this that synchronism ^ f^on blt P* 4 *™ converter 37 is therefore the (i+ 1)- 

is automatically established between the encrypting and 20 * erroneous code pattern bit k,' which may or may not 

the decrypting devices without resorting to a superflu- be identical with the correct code pattern bit k<i) and 

ous synchronizing bit. The decryption keying bit or bits ^ denoted by k/i) . The decrypted bit, now desig- 

produced by the decryption bit pattern converter 37 are bv a < > 18 therefore given by: 
identical with the encryption keying bit or bits kt used in 

the counterpart encrypting device on deriving the origi- «/ = */ © *K0* 

nal encrypted bit b*. The decryption adder 33 therefore , , 

produces a decrypted bit, denoted by a,, as: = ^ © WO © *iW )• 

Q t ~b&k b A* described before, use of any one of the code pat- 

30 tern bits is equally probable both for the correct and the 
producing a correct reproduction of the input data bit erroneous code patterns K and K'. Considering a corn- 
sequence, bined code pattern (K0K'), the ratio of the number of 

When an error appears in the receive encrypted bit decrypted bits of a certain polarity to the number of 

sequence at a particular receive encrypted bit b/, errors other decrypted bits is decided by the number of binary 

will occur in the decrypted bits for a duration of (m+ 1) 35 ones included in the code pattern bits of the combined 

clock periods, during which the particular receive en- °°de pattern. The combined code pattern represents 

crypted bit is present in the decryption shift register 36. what is referred to in the art as a signal or intercode 

The decrypting device returns to normal in the (m -h 1) distance between the two code patterns K and K'. 

clock periods with the synchronism automatically re- k Mw understood that the code patterns to be 

stored and with the receive encrypted bit sequence <0 preset in the encryption bit pattern converter 17 and 

correctly decrypted. consequently in the decryption bit pattern converter 37 

Turning to FIG. 3, a decrypting device for use in should be selected from a set of code patterns or keys in 

combination with the encrypting device illustrated with which the intercode distance between any two element 

reference to FIG. 2 comprises similar parts designated code patterns is neither equal to zero nor to the greatest 

by like reference numerals. The feedforward line 32 43 possible number of memory output bit pattern J, such as 

illustrated in FIG. 1 is depictetd as first and second feed- M > but k equal to or near to a half of that greatest possi- 

forward leads 39t and 392. The decryption bit pattern We number J/2. Various methods of obtaining such a 

converter 37 comprises a unit decryption bit pattern code pattern set are already known as problems in the 

converter 393 and a decryption conductor 394 corre- cede theory. Some are described by W. W. Peterson 

sponding to the unit encryption bit pattern converter 26 50 and E.J. Weldon, Jr., in a book entitled ''Error Correct- 

and the encryption conductor 27. ing Code,'* Second Edition, 1972, published by "The 

In order to insure the secrecy of information with the MIT Press," pages 206-21 1. 
decryption devices illustrated with reference to FIGS. One of such code pattern sets will be given in Table, 
1 and 3, it is desirable that nearly a half of the decrypted which follows, for a pattern length J of sixteen bits, 
bits should have a polarity opposite to the other de- 55 namely, for four-bit encryption or decryption memory 
crypted bits if the decryption bit pattern converter 37 or output bit patterns. Six bits of each code pattern are for 
393 were loaded with an erroneous code pattern which u ? e as information bits and ten remaining bits, as redun- 
is different from a correct code pattern preset in the dant bits. Inasmuch as the information bits are six in 
counterpart encryption bit pattern converter 17 or 26. number, the code pattern set consists of sixty-four ele- 
The erroneous code pattern or a single erroneous code 6° me, *t code patterns Ki through Kw- Each code pattern 
pattern equivalent to an erroneous code pattern and ™W *>e represented in general by (ko, ki, . . . , ki 5 ). The 
other code pattern or patterns, will be denoted by K\ code patterns have a feature such that the bits arranged 
Considering the encrypting and the decrypting devices ™ » certain permutation, such as (k 3t k 9l k* k», k* k& 
of FIG. 1, it will be assumed that the erroneous code k io» fc, k n, ko, k7, ka, ku, kis, kw), is an element 
pattern K' consists of first through M-th code pattern 65 code pattern, of a minimum intercode distance (a mini- 
bits: mum weight) of six and a maximum intercode distance 

(a maximum weight) of ten. The first six bits (k3, k9, ks, 

<M, ki\ • • • . kjtf-i'). kia, ki, k*) are used as the information bits and the re- 
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maining bits, as the redundant bits. It is possible to pre- 
determine the permutation in an optional manner. The 
element code patterns are the BCH cyclic codes as 
called in the art 

TABLE 



degree of encryption is remarkably excellent. When the 
receive encrypted bit sequence is decrypted by the use 
of at least one erroneous code pattern, the decrypted bit 
sequence includes polarity inverted bits at the above- 
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The element code patterns in the Table are deter- 25 
mined as follows. 

At first, the information bits (k3, k9, kj, kn, ki, ke) are 
given binary zero or zeros and one or ones in different 
manners for the respective code patterns. For example, 
the information bits of the element code patterns Ki and 30 
K 2 are given (000001) and (000010). Next, a polynomial 
of x is defined for each code pattern by: 



k3X I4 +k 9 x 13 +k5X ,2 +knx ll +kjx l0 +k6X 9 .. 

The polynomial is divided by: 

(x 4 +x+ I)(x«+x3+x2+x+ l)<x+ 1). 

The remainder is written as a polynomial: 

rix 8 +nx 7 + r3X 6 + r4X 5 + rsx 4 -t: r6» 3 + r7x 2 +rgx+r9. 

Nine of the ten redundant bits are determined by: 



35 



40 



45 



kio « n 

ku « r4 

kg = n 



k2 - T2 
ko = « 
k n = f8 



k4-rs 
k? = T6 
kl5 = r»- 



The last redundant bit kj4 in each code pattern is the 50 
even parity bit as named in the art. That is, the last bit 
is decided so that each code pattern may consist of an 
even number of binary ones. 

In each element code pattern, the redundant bits are 
uniquely decided by the information bits as described 55 
above. It is therefore possible to make the encryption or 
decryption bit pattern converter produce only the infor- 
mation bits of a preset one of the code patterns in re- 
sponse to the memory output bit pattern and immedi- 
ately thereafter the redundant bits. The redundant bits 60 
may be produced by another ROM section accessed by 
the information bits. Alternatively, the microprocessor 
may calculate the redundant bits in response to the 
information bits. 

The element code patterns include binary ones, from 65 
six to ten in number. The original encrypted bit se- 
quence therefore includes polarity inverted bits at a 
ratio between 6/16 or 0.375 and 10/16 or 0.625. The 



mentioned ratio. The "decrypted" information can 
hardly be understood by the recipient of the original 
encrypted bit sequence. 

With an encrypting and decrypting system described 
above with reference to the drawing figures, an unau- 
thorized recipient must find out the code patterns on 
deciphering an encrypted bit sequence. It is, however, 
very difficult for him to know all bits of a code pattern 
from si portion thereof. This is because he has no infor- 
mation as regards those bits of a code pattern from 
which other bits are decided as described in conjunction 
with the BCH cyclic code. Furthermore, all bits may be 
selected independently of one another. He must analyse 
a considerable number of the encrypted bits, such as 2 m 
bits. The number 2 m is usually greater than the number 
2m described hereinabove in connection with an en- 
crypting and decrypting system of the type described in 
the Savage article. 

Referring now to FIG. 4, an encrypting device ac- 
cording to a third embodiment of this invention com- 
prises similar parts designated by like reference numer- 
als. The encryption bit pattern converter 17 comprises 
first through third encryption converters 41, 42, and 43 
loaded with first through third code patterns Ki, K2, 
and K3; each of which may be the single code pattern 
described before. Responsive to each encryption mem- 
ory output bit pattern produced by the encryption shift 
register 16 and the code patterns Ki through K3, the 
converters 41 to 43 produce first and second converted 
encryption bits c/ and d/and the at least one encryption 
keying bit k/, respectively, as follows. 

A first additional encryption adder 46 is for calculat- 
ing a first encryption sum modulo two of the original 
encrypted bit b t and the first converted bit c { . The sum 
gives a first encryption sum bit U The first sum bits f;'s 
successively produced by the adder 46 are stored and 
shifted in a first additional encryption shift register 47, 
which produces a first additional encryption memory 
output bit pattern. Responsive to the first additional 
memory output bit pattern and the second code pattern, 
the second converter 42 produces the second converted 
bit. A second additional encryption adder 48 is for cal- 
culating a second encryption sum modulo two of the 
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encrypted bit b, and the second converted bit d/. The. 
second sum gives a second encryption sum bit gf. The 
second sum bits g/s are treated by a second additional 
encryption shift register 49 into a second additional 
encryption memory output bit pattern, supplied with 5 
which the third converter 43 produces the at least one 
encryption keying bit according to the third code pat- 
tern K3. 

With an encrypting device illustrated above with 
reference to FIG. 1 or 2, the encrypted bits are shifted 10 
into a single shift register 16 as they are. In contrast, the 
encrypted bits are not shifted in the additional shift 
registers 47 and 49. This makes it more difficult for an 
unauthorized recipient to decipher the encrypted bit 
sequence. 15 

Reviewing FIG. 4, the bit pattern converter 17 com- 
prises a unit encryption bit pattern converter 41 prelimi- 
narily loaded with a unit code pattern K[ and respon- 
sive to an encryption memory output bit pattern pro- 
duced by the encryption shift register 16 for producing 20 
a converted encryption bit Cf. An encryption adder 46 
calculates the first sum modulo two to produce an en- 
cryption sum bit f/ given by the sum. Using the encryp- 
tion clock pulses as shift pulses, an additional encryp- 
tion shift register 47 retains a prescribed number mi of 25 
such sum bits f/s during each encryption clock period 
and produces an encryption shift register bit pattern 
represented by the mi sum bits retained therein. An 
additional encryption bit pattern converter 42 prelimi- 
narily loaded with an additional code pattern K2, may 30 
directly supply the adder 13 with the encryption keying 
. bit or bits k/. Alternatively, an additional encryption bit 
pattern converting section may comprise the bit pattern 
converters 42 and 43, the other adder 48, and the other 
shift register 49. The shift registers 17, 47, and 49 have 35 
a predetermined number m of stages, a first prescribed 
number m\ of stages, and a second prescribed number 
m2 of stages, respectively. The predetermined and the 
first and the second prescribed numbers may or may not 
be equal to one another. 40 

When viewed from a different angle, the encrypting 
device comprises a modulo-two encryption adding sec- 
tion comprising the adders 46 and 13 for calculating a 
first encryption sum modulo two of each original en- 
crypted bit b/and an encryption adding section input bit 45 
c/ and a second encryption sum modulo two of each 
input data bit a/ and at least one encryption keying bit k/. 
to produce an encryption sum bit f t given by the first 
sum and the sequence of original encrypted bits with 
each original encrypted bit given by the second sum. 50 
An encryption shift register section comprising the shift 
registers 16 and 47 are supplied with the encryption 
clock pulses as shift pulses and retains, during each 
encryption clock period, a predetermined number m of 
the original encrypted bits and a prescribed number m' 55 
of the encryption sum bits successively produced by the 
adding section to produce a unit and an additional en- 
cryption shift register bit pattern represented by the m 
encrypted bits retained therein and the m' successive 
sum bits retained therein, respectively. 60 

An encryption bit pattern converting section com- 
prises the first converter 41 responsive to the unit code 
pattern Ki for converting the unit shift register bit pat- 
tern to a unit converted encryption bit c*, which is sup- 
plied to the adding section as the adding section input 65 
bit c t . The bit pattern converting section further com- 
prises the second converter 42, the second adder 48, the 
second additional shift register 49, and the third con- 



672 

14 

verter 43 and are loaded with two code patterns K2 and 
K3 as at least one code pattern for converting the addi- 
tional shift register bit pattern to at least one additional 
converted encryption bit, which is supplied to the add- 
ing section as the above-mentioned at least one keying 
bit. 

As described above, the encryption bit pattern con- 
verting section may comprise a unit encryption bit pat- 
tern converter 41 preliminarily loaded with the unit 
code pattern Ki and responsive to the unit encryption 
shift register bit pattern for producing the unit con- 
verted encryption bit c t , A first additional encryption 
bit pattern converter 42 is preliminarily loaded with a 
first additional code pattern K2 and responsive to the 
additional encryption shift register bit pattern for pro- 
ducing an intermediate converted encryption bit d*. The 
converting section further comprises a modulo-two 
encryption adder 48 for calculating a sum modulo two 
of the intermediate converted encryption bit d t and the 
original encrypted bit b t produced by the adding section 
during the above-mentioned each encryption clock 
period to produce an intermediate encryption bit gf 
given by the sum calculated thereby, and an encryption 
shift register 49 responsive to the encryption clock 
pulses supplied thereto as shift pulses for retaining, 
during each encryption clock period, a preselected 
number m" of the intermediate encryption bits succes- 
sively produced by the adder 48 to produce an auxiliary 
encryption shift register bit pattern represented by the 
intermediate encryption bits retained thereby, A second 
additional encryption bit pattern converter 43 is prelim- 
inarily loaded with a second additional code pattern K3 
and responsive to the auxiliary shift register bit pattern 
for producing the at least one additional converted bit, 

A decrypting device depicted in FIG. 5 is for use as 
a counterpart of the encrypting device of FIG. 4 and 
comprises similar parts designated by the reference 
numerals 31, 32, 33, 34, and 36. First through third 
decryption bit pattern converters 51, 52, and 53, a first 
additional decryption adder 56, a first additional de- 
cryption shift register 57, a second additional decryp- 
tion adder 58, and a second additional decryption shift 
register 59 are counterparts of the elements 41 through 
43 and 46 through 49, The unit and the additional code 
patterns Ki through K3 are used to produce first and 
second converted decryption bits o t and d t and at least 
one decryption keying bit k t in response to the receive 
encrypted bit b t and first and second modulo-two de- 
cryption sums ft and g*. Inasmuch as in FIG. 4: 

it is obvious that: 

that is, the decrypted bits a/s are correct reproductions 
of the respective input data bits. 

Referring to FIG. 6, an encrypting device according 
to a fourth embodiment of this invention comprises 
similar parts designated by like reference numerals. 
Two feedback lines 21 and 22 are supplied with a unit 
encryption keying bit k\ t and at least one additional 
encryption keying bit k2/. The encryption adder modulo 
two 13 is shown separately as unit and additional en- 
cryption adders modulo two 61 and 62. The encrypting 
device being illustrated is different from that illustrated 
with reference to FIG. 2 in that the encryption bit pat- 
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tern converter 17 comprises unit and additional encryp- 75 is for calculating a second encryption sum modulo 
tion bit pattern converters 63 and 64 preliminarily two of each second input data bit, the at least one key- 
loaded with unit and at least one additional code pat- ing bit, each first original encrypted bit, and first and 
terns Ki and respectively. The unit code pattern second encryption adding section input bits c t and d/ to 
converter 63 is for producing the unit keying bit kirin 5 produce a sequence of the second original encrypted 
response to the encryption memory output bit pattern D i te ^th each second original encrypted bit given by 
produced by the encryption shift register 16. The addi- second sum. Sixth and seventh encryption adders 76 
tional bit pattern converter 64 is accompanied by first md 77 m for calculating a third and a fourth encpytion 
and second additional encryption shift registers 66 and gum modulo two of each flrst original encrypted bit and 
67 for retaining, during each encryption clock period, 10 ^ ^ md ^ second addin m t bit8 t0 
first and second prescribed numbers m, and m 2 of the duce fc ^ 8ecQnd section 
unit keying bite successively produced by the unit en- £ * e foufth 
cryption bit pattern converter 63, respectively. The first reRnectivelv 
and the second additional shift registers 66 and 67 are sums, respectively. 

for producing, in cooperation wirtTeach other, an en- 15 An encryption shift register section is responsive to 
cryption shiffregister bit pattern represented by a pre- " th * clock pulses supplied ^thereto as shift 
determined permutation of the mi and the m 2 unit key- P dses ; * unit encryption shift register 81 is for retaining 
ing bits retained therein, respectively. Responsive to the a predetermined number m of the second original en- 
shift register bit pattern, the additional bit pattern con- crypted bits during each encryption clock period. A 
verter 64 produces the at least one additional encryp- 20 first additional encryption shift register 82 is for retain- 
tion keying bit k 2 ,. m S a ^ prescribed number mi of the first adding 
It is possible to optionally select the predetermined section output bits successively produced by the sixth 
-and the first and the second prescribed numbers. The adder 76. A second additional encryption shift register 
pattern length of the additional code pattern is decided 83 is for retaining a second prescribed number m 2 of the 
according to the greatest possible number of different 25 second adding section output bits successively pro- 
shift register bit patterns produced by the cooperation duced by the combination of adders 72 through 76. The 
of the shift registers 66 and 67. The original encrypted unit and the first and the second additional shift regis- 
bit b t is given by: ters 81 through 83 concurrently produce a unit and a 

first and a second additional shift register bit pattern 

f>r=0/©*ii©*^ 30 represented by the m second original encrypted bits and 

the mi first and the m 2 second adding section output bits 

A decrypting device shown in FIG. 7 is for use in retained therein, respectively, 

combination with the encrypting device illustrated with In ^ encryption bit pattern converting section, a unit 

reference to FIG. 6. Elements 61', 62', 63', 64', 66', and b ft pa ttern converter 86 is for keeping a unit code pat- 

67' are equivalents of the elements 61 through 64 and 66 tern Kj ^ for converting the unit shift register bit 

and 67. It is obvious that each decrypted bit given by a pattern t0 a ^ converted encryption bit. A first addi- 

sum modulo two (0,$^,©^) is a faithful reproduction tional encryption bit pattern converter 87 is for keeping 

of the input data bit. It is very difficult for an unautho- a ^ additiona] co de pattern K 2 and the converting the 

rized recipient to decipher the encrypted Wt sequence fim additiona i shift register bit pattern to a first addi- 

because the original encrypted bits are not shifted m the tional converted encryption bit. A second additional 
additional shift registers 66 and 67 in the encrypting «° encryption bit pattern converter 88 is for keeping at 

™£fu .1. j j v . e least one second additional code pattern K3 and for 
With the encrypting and decking system so far convertin tne second additi o na i shift register bit pat- 
described with reference to FIGS. 1 through .7, it k Qne gecond additional conv trted encryp. 
possible to encrypt a sequence of input data digits, each { Th ^ converted bit and the first and the at 
comprising a plurality of paraUel and/or series bits, into * additional converted bits are supplied 

^e ^secSon as the first and the second adding 

the decryption. For example, only one of the parallel input bits c,and d,and the at least one keying bit 

and/or series bit sequences may be encrypted into a ^ w ' ; ^ 6 

sequence of original encrypted bits by one of the en- k/, respecti ve ly. 

erupting devicerAlternatively, all parallel and/or se- 50 F™Uy referring to FIG 9, a decrypting device is for 

ries bit sequences may be encrypted by the same or Producing a sequence of decrypted digits from a se- 

difTerent encrypting devices. quence of receive encrypted digits substantially identi- 

Turning now to FIG. 8 ( an encrypting device accord- cal ^ lth onginal encrypted digit sequence produced 

ing to a fifth embodiment of this invention is for en- by the encrypting device illustrated with reference to 
crypting a sequence of input data digits, each compris- 55 FIG. 8. A sequence of local clock pulses is for timing 

ing first and second parallel input data bits at, and a 2 ,, ^ receive encrypted and the decrypted digits with a 

into a sequence of original encrypted digits, each com- ! <>cal clock period equal to the encryption clock period, 

prising first and second original encrypted bits bu and Each decrypted digit comprises first and second de- 

b 2/ . The first and the second input data bits may be any crypted bits, which will again be designated by air and 
two of a plurality of parallel input data bits for each 60 a 2/ . Each receive encrypted digit comprises first and 

input data digit. second receive encrypted bits, denoted by bu and b 2f . 

In an encryption modulo-two adding section, a first In a modulo-two decryption adding section, a first 
encryption adder 71 is for calculating a first encryption decryption adder 91 is for calculating a first decryption 
sum modulo two of each first input data bit and at least sum modulo two of each first receive encrypted bit and 
one encryption keying bit k, to produce a sequence of 65 at least one decryption keying bit produced as will 
the first original encrypted bits with each first original presently be described. The first decryption sums suc- 
encrypted bit given by the first sum. A combination of cessively calculated for the respective first receive en- 
second through fifth encryption adders 72, 73, 74, and crypted bits, give a sequence of the first decrypted bits. 
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A combination of second, through fifth decryption ad- patterns. As has been pointed out in connection with the 
ders 92, 93, 94, and 95 is for calculating a second de- encrypting device with reference to PIG. 1, a shift 
cryption sum modulo two of each second receive en- register used in any encrypting device according to this 
crypted bit, the at least one decryption keying bit, each invention is equivalent to a signal distributor, 
first receive encrypted bit, and first and second decryp- 3 While this invention has thus far been described in 
tion adding section input bits, denoted by C/ and d ti specific conjunction with several embodiments thereof 
respectively. In cooperation, the adders 92 through 95 and a number of modifications, it will now be readily 
produce a sequence of the second decrypted bits with feasible for one skilled in the art to carry this invention 
each second decrypted bit given by the second decryp- into effect in various other manners. For example, an 
tion sum. Sixth and seventh decryption adders 96 and 97 10 input data bit or digit sequence may preliminarily be 
are for calculating a third and a fourth decryption sum scrambled, before application to an encrypting device 
modulo two of each first receive encrypted bit and the according to this invention, by a conventional scram- 
first and the second decryption adding section input bier comprising a maximal-length sequence generator, 
bits, respectively. The sixth and the seventh adders 96 The number of the shift register or registers used in the 
and 97 produce first and second decryption adding 15 encrypting device illustrated with reference to any one 
section output bits f> and g* given by the third and the of FIGS. 1, 2, 4, 6, and 8 is optional provided that the 
fourth decryption sums, respectively. same permutation is used to provide the memory output 
A decryption shift register section is responsive to the or shift register bit pattern in the counterpart decrypt- 
local clock pulses supplied thereto as shift pulses. A unit ing device as regards the parallel bit sequences into 
decryption shift register 101 retains m second decrypted 20 which the receive encrypted bit or digit sequence is 
bits during each local clock period and produces a unit distributed. The adding section described in connection 
decryption bit pattern represented by the bits retained with FIGS. 4, 6, and 8 may be modified in various ways, 
therein. A first additional decryption shift register 102 is with the adding section correspondingly modified in the 
for retaining mi first decryption adding section output cooperating decrypting device, 
bits to produce a first additional decryption shift regis- 25 What is claimed is: 

ter bit pattern represented by the retained bits. A second 1. ; An encrypting device for encrypting a sequence of 

additional decryption shift register 103 is for retaining input data bits into a sequence of encrypted bits in re- 

m2 second decryption adding section output bits to spouse to a sequence of clock pulses timing said input 

produce a second additional shift register bit pattern data bits and said encrypted bits with a predetermined 

represented by the retained bits. 30 clock period, comprising: 

In a decryption bit pattern converting section, a unit memory means responsive to the clock pulses for 
. decryption bit pattern converter 106 is preset with the memorizing a predetermined number m of the en- 
unit code pattern Ki and is responsive to the unit de- crypted bits during each clock period to produce a 
cryption shift register bit pattern for producing a unit memory output bit pattern represented by the m 
converted decryption bit, which is used as the first 35 encrypted bits memorized therein; 
decryption adding section input bit c,. A first additional , bit pattern converting means responsive to at least 
decryption bit pattern converter 107 is for keeping the one code pattern for converting said memory out- 
first additional bit pattern K2 and is responsive to the put bit pattern to at least one keying bit, said bit 
first additional decryption shift register bit pattern for pattern converting means storing a code pattern 
producing a first additional converted decryption bit, 40 including information bits at predetermined bit 
which is supplied to the decryption adding section as positions in said code pattern, other and remaining 
the second decryption adding section input bit dr. A bits in said code pattern being determined by said 
second additional decryption bit pattern converter 108 stored information bits; and 
is for keeping the at least one additional code pattern modulo-two adding means for calculating a sum mod- 
K3 and responsive to the second additional decryption 45 ulo two of each input data bit and said at least one 
shift register bit pattern for producing at least one addi- keying bit to produce said sequence of encrypted 
tional converted decryption bit as the at least One de- bits with each encrypted bit given by said sum. 
cryption keying bit k/. 2. An encrypting device as claimed in claim 1, 

It is possible to use the encryption device illustrated wherein said bit pattern converting means comprises 

with reference to FIG. 8 in combination with any at 50 means for keeping a unit code pattern as said at least one 

least one of the encryption devices illustrated with ref- code pattern and responsive to said memory output bit 

erence to FIGS. 1, 2, 4, and 6 in encrypting a sequence pattern for producing a unit keying bit as said at least 

of input data digits. Each input data digit may comprise one keying bit. 

one or more dummy input data bits so as to represent 3. An encrypting device as claimed in claim 1, 

three or a similar number of levels. 55 wherein said bit pattern converting means comprises 

Any one of the encryption bit pattern converters 41 means for keeping a preselected number s of unit code 

through 43, 66, 67, and 86 through 88 may be modified patterns as said at least one code pattern and responsive 

according to the teaching described in connection with to said memory output bit pattern for substantially si- 

FIG. 2. Any one of the bit pattern converters 41 multaneously producing s keying bits as said at least one 

through 43 and 86 through 88 may be modified into the 60 keying bit. 

encryption bit pattern converter section 17 described in 4. An encrypting device as claimed in claims 1, 2, or 

conjunction with FIG. 4. Each of the bit pattern con- 3, wherein said at least one code pattern consists of 

verters 41, 42, and 66 may be preset with a plurality of binary bits, equal in number to 2". 

code patterns, which are equivalent to a single unit or 5. An encrypting device as claimed in claim 1, said 

additional code pattern as regards software as described 65 memory means comprising a shift register which has 

heretobefore. Each code pattern may have a pattern first through (m— l>th and m-th stages as counted from 

length either longer or shorter than the greatest possible the stage supplied with each encrypted bit from said 

number J of different memory output or shift register bit adding means and by which said clock pulses are used as 
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shift pulses, said first through said (m-l)-th and said 
m-th stages simultaneously producing first through 
(m— l)-th and m-th output signals collectively as said 
memory output bit pattern, respectively, wherein said 
bit pattern converting means comprises: 5 
a bit pattern converter for keeping a 2 m_1 -bit code 
pattern and responsive to said first through said 
(m- l)-th output signals for producing a first key- 
ing bit as one of said at least one keying bit; and 
a conductor responsive to said m-th output signal for 10 
producing a second keying bit as another of said at 
least one keying bit; 
said at least one code pattern being equivalent to two 
2^-1 -bit code patterns, one being given by a con- 
catenation of two code patterns, each being identi- is 
cal with said 2 m - 1 -bit code pattern, the other being 
given by a succession of binary zeros, 2 m_I in num- 
ber, followed by binary ones, 2 m_1 in number. 

6. An encrypting device as claimed in claim 1, said at 
least one code pattern is at least two in number and 20 
given by a unit code pattern and at least one additional 
code pattern, wherein said bit pattern converting means 
comprises: 

a unit bit pattern converter for keeping said unit code 
pattern and responsive to said memory output bit 25 
pattern for producing a converted bit; 

a modulo-two adder for calculating a sum modulo 
two of said converted bit and the encrypted bit 
produced by said adding means during said each 
clock period to produce a sum bit given by the sum 30 
calculated thereby; 

shift register means responsive to the clock pulses 
supplied thereto as shift pulses for retaining, during 
each clock period, a prescribed number of the sum 
bits successively produced by said adder to pro- 35 
duce a shift register bit pattern represented by the 
sum bits retained therein; and 

additional bit pattern converting means responsive to 
said at least one additional code pattern for con- 
verting said shift register bit pattern to said at least 40 
one keying bit 

7. An encrypting device as claimed in claim 1, said at 
least one code pattern is at least two in number and 
given by a unit code pattern and at least one additional 
code pattern, said at least one keying bit consisting of a 45 
unit keying bit and at least one additional keying bit, 
wherein said bit pattern converting means comprises: 

a unit bit pattern converter for keeping said unit code 
pattern and responsive to said memory output bit 
pattern for producing said unit keying bit; SO 

at least a first and a second shift register responsive to 
the clock pulses supplied thereto as shift pulses for 
retaining, during each clock period, a first and a 
second prescribed number of the unit keying bits 
successively produced by said unit bit pattern con- 55 
verter, respectively, to produce in cooperation 
with each other a shift register bit pattern repre- 
sented by the unit keying bits retained therein, 
respectively; and 

additional bit pattern converting means responsive to 60 
said at least one additional code pattern for con- 
verting said shift register bit pattern to said at least 
one additional keying bit. 

8. An encryption device for encrypting a sequence of 
input data bits into a sequence of encrypted bits in re- 65 
sponse to a sequence of clock pulses timing said input 
data bits and said encrypted bits with a predetermined 
clock period, comprising: 



modulo-two adding means for calculating a first sum 
modulo two of each encrypted bit and an adding 
means input bit and a second sum modulo two of 
each input data bit and at least one keying bit to 
produce a sum bit given by said first sum and said 
sequence of encrypted bits with each encrypted bit 
given by said second sum; 

shift register means responsive to the clock pulses 
supplied thereto as shift pulses for retaining, during 
each clock period, a predetermined number m of 
. the encrypted bits and a prescribed number of the 
sum bits successively produced by said adding 
means to produce a unit and an additional shift 
register bit pattern represented by the m encrypted 
bits retained therein and the sum bits retained 
therein, respectively; 

bit pattern converting means responsive to a unit 
code pattern for converting said unit shift register 
bit pattern to a unit converted bit and responsive to 
at least one additional code pattern for converting 
said additional shift register bit pattern to at least 
one additional keying bit; and 

means for supplying said unit and said at least one 
additional converted bits to said adding means as 
said adding means input bit and said at least one 
keying bit, respectively. 

9. An encrypting device as claimed in claim 8, said at 
least one additional code pattern being two in number 
and given by a first and a second additional code pat- 
tern, wherein said bit pattern converting means com- 
prises: 

a unit bit pattern converter for keeping said unit code 
pattern and responsive to said unit shift register bit 
pattern for producing said unit converted bit; 

a first additional bit pattern converter for keeping 
said first additional code pattern and responsive to 
said additional shift register bit pattern for produc- 
ing an intermediate converted bit; 

a modulo-two adder for calculating a sum modulo 
two of said intermediate converted bit and the 
encrypted bit produced by said adding means dur- 
ing said each clock period to produce an intermedi- 
ate bit given by the sum calculated thereby; 

a shift register responsive to the clock pulses supplied 
thereto as shift pulses for retaining, during each 
clock period, a preselected number of the interme- 
diate bits successively produced by said adder to 
produce an auxiliary shift register bit pattern repre- 
sented by the intermediate bits retained thereby; 
and 

a second additional bit pattern converter for keeping 
said second additional code pattern and responsive 
to said auxiliary shift register bit pattern for pro- 
ducing said at least one additional converted bit 

10. An encrypting device as claimed in claims 6, 7, 8, 
or 9, wherein said unit code pattern consists of binary 
bits, equal in number to 2 m . 

11. An encrypting device for encrypting a sequence 
of input data digits into a sequence of encrypted digits in 
response to a sequence of clock pulses timing said input 
data digits and said encrypted digits with a predeter- 
mined clock period, each input data digit comprising a 
first and a second input data bit, each encrypted digit 
comprising a first and a second encrypted bit, said de- 
vice comprising: 

modulo-two adding means for calculating a first sum 
modulo two of each first input data bit and at least 
one keying bit to produce a sequence of the first 
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encrypted bits with each first encrypted bit given period equal to said predetermined encryption clock 

by said sum, a second sum modulo two of each period and comprising: 

second input data bit, said at least one keying bit, decryption memory means responsive to said local 

each first encrypted bit, and a first and a second clock pulses for memorizing m receive encrypted 

adding means input bit to produce a sequence of 5 bits during each local clock period to produce a 

the second encrypted bits with each second en- decryption memory output bit pattern represented 

crypted bit given by said second sum, and a third by the m receive encrypted bits memorized therein; 

and a fourth sum modulo two of each first en- decryption bit pattern converting means responsive 

crypted bit and said first and said second adding to said at least one code pattern for converting said 

means input bits to produce a first and a second 10 decryption memory output bit pattern to at least 

adding means output bit given by said third and one decryption keying bit; and 

said fourth sums, respectively; decryption modulo-two adding means for calculating 

shift register means responsive to the clock pulses a sum modulo two of each receive encrypted bit 
supplied thereto as shift pulses for retaining, during and said at least one decryption keying bit to pro- 
each clock period, a predetermined number m of 15 duce said sequence of decrypted bits with each 
the second encrypted bits, a first prescribed num- decrypted bit given by the sum calculated by said 
ber mi of the first adding means output bits succes- decryption adding means, 
sively produced by said adding means, and a sec- 14. A decrypting device as claimed in claim 13, said 
ond prescribed number m2 of the second adding encryption bit pattern converting means comprising 
means output bits successively produced by said 20 means for keeping a unit code pattern as said at least one 
adding means to produce a unit and a first and a code pattern and responsive to said encryption memory 
second additional shift register bit pattern repre- output bit pattern for producing a unit encryption key- 
sented by the m second encrypted bits and the mi ing bit as said at least one encryption keying bit, 
first and the m2 second adding means output bits wherein said decryption bit pattern converting means 
retained therein, respectively; 25 comprises means for keeping said unit code pattern as 

bit pattern converting means responsive to a unit and said at least one code pattern and responsive to said 

a first and at least one second code pattern for decryption memory output bit pattern for producing a 

converting said unit and said first and said second unit decryption keying bit as said at least one decryption 

additional shift register bit patterns to a unit and a keying bit 

first and at least one second additional converted 30 15. A decrypting device as claimed in claim 13, said 
bit, respectively, said bit pattern converting means encryption bit pattern converting means comprising 
storing a code pattern including information bits at means for keeping a preselected number s of unit code 
predetermined bit positions in said code pattern, patterns as said at least one code pattern and responsive 
other and remaining bits in said code pattern being to said encryption memory output bit pattern for sub- 
determined by said stored information bits; and 35 stantially simultaneously producing s encryption keying 
means for supplying said unit and said first and said at bits as said at least one encryption keying bit, wherein 
least one second additional converted bits to said said decryption bit pattern converting means comprises 
adding means as said first and said second adding means for keeping said s unit code patterns as said at 
means input bits and said at least one keying bit, least one code pattern and responsive to said decryption 
respectively. 40 memory output bit pattern for substantially simulta- 

12. An encrypting device as claimed in claim 11, neously producing s decryption keying bits as said at 
wherein said unit and said first and said at least one least one decryption keying bit. 

second code patterns consist of binary bits, equal in 16. A decrypting device as claimed in claims 13, 14, 

number to 2 m , 2 ml , and 2 m2 , respectively. or 15, wherein said at least one code pattern consists of 

13. A decrypting device for decrypting a sequence of 45 binary bits, equal in number to 2 m . 

receive encrypted bits into a sequence of decrypted bits, 17. A decrypting device as claimed in claim 13, said 
said sequence of receive encrypted bits being substan- encryption memory means comprising an encryption 
dally identical with a sequence of original encrypted shift register which has first through (m— l)-th and 
bits produced by an encrypting device in response to a m-th encryption stages as counted from the stage sup- 
sequence of input data bits and a sequence of encryption 50 plied with each original encrypted bit from said encryp- 
clock pulses timing said input data bits and said original tion adding means and by which said encryption clock 
encrypted bits with a predetermined encryption clock pulses are used as shift pulses, said first through said 
period, said encrypting device comprising encryption m— l)-th and said m-th stages simultaneously producing 
memory means responsive to the clock pulses for mem- first through (m— l)-th and m-th encryption output 
orizing a predetermined number m of the original en- 55 signals collectively as said encryption memory output 
crypted bits during each clock period to produce an bit pattern, respectively, said encryption bit pattern 
encryption memory output bit pattern represented by converting means comprising an encryption bit pattern 
the m original encryption bits memorized therein, en- converter for keeping a 2 m_1 -bit code pattern and re- 
cryption bit pattern converting means responsive to at sponsive to said first through said (m— l)-th output 
least one code pattern for converting said memory out- 60 signals for producing a first encryption keying bit as one 
put bit pattern to at least one encryption keying bit, and of said at least one encryption keying bit, and an encryp- 
encryption modulo-two adding means for calculating a tion conductor responsive to said m-th output signal for 
sum modulo two of each input data bit and said at least producing a second encryption keying bit as another of 
one keying bit to produce said sequence of original said at least one encryption keying bit, said at least one 
encrypted bits with each original encrypted bit given by 65 code pattern being equivalent to two 2 m -bit code pat- 
said, sum, said decrypting device being responsive to a terns, one being given by a concatenation of two code 
sequence of local clock pulses timing said receive en- patterns, each being identical with said 2 m ~ 1 -bit code 
crypted bits and said decrypted bits with a local clock pattern, the other being given by a succession of binary 
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zeros, 2 m " 1 in number, followed by binary ones, 2 m_ 1 tern for converting said decryption shift register bit 
in number, wherein: pattern to said at least one decryption keying bit 
said decryption memory means comprises a decryp- 19. A decrypting device as claimed in claim 13, said at 
tion shift register which has first through (m— l)-th least one code pattern being at least two in number and 
and m-th decryption stages as counted from the 5 given by a unit code pattern and at least one additional 
decryption stage supplied with each receive en- code pattern, said at least one encryption keying bit 
crypted bit supplied also to said decryption adding consisting of a unit encryption keying bit and at least 
means and by which said local clock pulses are one additional encryption keying bit, said at least one 
used as shift pulses, said first through said (m— 1)- decryption keying bit consisting of a unit decryption 
th and said m-th decryption stages simultaneously 10 keying bit and at least one additional decryption keying 
producing first through (m-l>th and m-th de- bit ; said at least one additional decryption keying bit 
cryption output signals collectively as said decryp- being equal in number to said at least one additional 
tion memory output bit pattern; encryption keying bit, said encryption bit pattern con- 
said decryption bit pattern converting means com- verting means comprising a unit encryption bit pattern 
prising: 1 5 converter for keeping said unit code pattern and respon- 
a decryption bit pattern converter for keeping said sive to said encryption memory output bit pattern for 
2 m-i. bit code pattern and responsive to said first Producing said unit encryption keying bit, encryption 
through said (m-l)-th decryption output signals shift register means responsive to the encryption clock 
for producing a first decryption keying bit as one of P^e s su PP Hed the f eto » t shift . V" lses for staining, 
said at least one decryption keying bit; and 20 dunn S each encryption clock period, a prescribed num- 
a decryption conductor responsive to said m-th de- » °f un * encryption keying bits successively 
cryption output signal for producing a second de- P^dn^d by said unit encryption bit pattern converter 
cryption keying bit as another of said at least one to P" x°T ^P' 10 " smft p *f tern re ? re : 
decryption keying bit sented by the m un,t encrv Ptton keying bits retained 
18. A decrypting device as claimed in claim 13, said at 25 f herein ' ™ d addit ! on f encryption bit pattern convert- 
least one code pattern being at least two in number and m * raeans to ™* at leas ° ne add *°^ °<*e 
, * . j 6 , . . JJV . pattern for converting said encryption shift register bit 
given by a unit code pattern and at least one additional * m sM * k m 

code pattern, said encryption bit pattern converting & wherdn ^ d tion bit patte rn converting 

means comprising a unit encryption bit pattern con- 3Q mea ns comprises- 

verter for keeping said unit code pattern and responsive a unit d ^on bit pattern converter for keeping 

to said encryption memory output bit pattern for pro- ^ mH code ttcrn and responsive to said dc . 

ducing a converted encryption bit, an encryption modu- tion mem Qu ^ ut bit tcrn for producing 

lo-two adder for calculating a sum modulo two of said ^ unit deC ryption keying bit; 

converted bit and the original encrypted bit produced 35 decryption shift registe r me ans responsive to the 

by said encryption adding means during said each en- local clock pulses supplied theret0 ag Aift pulses 

cryption clock period to produce an encryption sum bit for retaining, during each local clock period, ra' 

given by the sum calculated by said adder, encryption unit decryption keying bits successively produced 

shift register means responsive to the encryption clock by said unit decryption bit pattern converter to 

pulses supplied thereto as shift pulses for retaining, 40 produce a decryption shift register bit pattern rep- 

dunng each encryption clock period, a prescribed num- resented by the m' unit decryption keying bits re- 

ber m' of the sum bits successively produced by said tained therein; and 

adder to produce an encryption shift register bit pattern additional decryption bit pattern converting means 
represented by the in' sum bits retained therein, and responsive to said at least one additional code pat- 
additional encryption bit pattern converting means re- 45 tern for converting said decryption shift register bit 
sponsive to said at least one additional code pattern for pattern to said at least one additional decryption 
converting said encryption shift register bit pattern to keying bit. 

said at least one encryption keying bit, wherein said 20. A decrypting device for decrypting a sequence of 

decryption bit pattern converting means comprises: receive encrypted bits into a sequence of decrypted bits, 

a unit decryption bit pattern converter for keeping 50 said sequence of receive encrypted bits being substan- 

said unit code pattern and responsive to said de- tially identical with a sequence of original encrypted 

cryption memory output bit pattern for producing bits produced by an encrypting device in response to a 

a converted decryption bit; sequence of input data bits and a sequence of encryption 

a decryption modulo-two adder for calculating a sum clock pulses timing said input data bits and said original 

modulo two of said converted decryption bit and 55 encrypted bits with a predetermined encryption clock 

the receive encrypted bit supplied also to said de- period, said encrypting device comprising modulo-two 

cryption adding means during said each local clock encryption adding means for calculating a first encryp- 

period to produce a decryption sum bit given by tion sum modulo two of each original encrypted bit and 

the sum calculated by said decryption adder; an encryption adding means input bit and a second 

decryption shift register means responsive to the 60 encryption sum modulo two of each input data bit and 

local clock pulses supplied thereto as shift pulses at least one encryption keying bit to produce an encryp- 

for retaining, during each local clock period, m' tion sum bit given by said first sum and said sequence of 

decryption sum bits successively produced by said original encrypted bits with each original encrypted bit 

decryption adder to produce a decryption shift given by said second sum, encryption shift register 

register bit pattern represented by the m' decryp- 65 means responsive to the encryption clock pulses sup- 

tion sum bits retained therein; and plied thereto as shift pulses for retaining, during each 

additional decryption bit pattern converting means encryption clock period, a predetermined number m of 

responsive to said at least one additional code pat- the original encrypted bits and a prescribed number m' 
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of the sum bits successively produced by said adding 
means to produce a unit and an additional encryption 
shift register bit pattern represented by the m original 
encrypted bits retained therein and the m' sum bits re- 
tained therein, respectively, encryption bit pattern con- 
verting means responsive to a unit code pattern for 
converting said unit shift register bit pattern to a unit 
converted encryption bit and responsive to at least one 
additional code pattern for converting said additional 
shift register bit pattern to at least one 'additional con- 
verted encryption bit, and feedback means for supply- 
ing said unit and said at least one additional converted 
encryption bits to said adding means as said adding 
means input bit and said at least one encryption 1 keying 
bit, respectively, said decrypting device being respon- 
sive to a sequence of local clock pulses timing said 
receive encrypted bits and said decrypted bits with a 
local clock period 1 ; equal to to said predetermined en- 
cryption clock period and comprising: ' 
modulo-two decryption adding means for calculating 20 
■ a first decryption sum modulo two of each receive 
encrypted bit and a decryption adding means input 
bit and a second decryption sum modulo two of 
each receive encrypted bit and at least one decryp- 
tion keying bit to produce a decryption, sum bit 25 
. given by said first decryption sum and said se- 
quence of decrypted bits with each decrypted bit 
given by said second decryption sum; 1 ' 
decryption shift register means responsive . to . the 
local clock pulse supplied thereto; as shift pulses for 30 
retaining; during each local clock period, m receive 
encrypted bits and m' decryption sum bits succes- 
sively produced by said decryption adding means 
to produce a unit and an additionaVdeciyption shift 
register bit pattern represented by th^ ni receive 35 
encrypted bits retained therein and the nV decryp- 
tion sum bits retained therein, res^cdVely; : v 
decryption bit pattern converting mea^' rjesponsiye 
to said unit code pattern for converting said unit 
decryption shift register bit pattern to a unit con- 
verted decryption bit and responsive to said at least 
one additional code pattern for converting said 
additional decryption shift register bit pattern to at 
least one additional converted decryption bit; and 



shift pulses for retaining, during each encryption clock 
period, a preselected number m" of the intermediate bits 
successively produced by said adder to produce an 
auxiliary encryption shift register bit pattern repre- 
5 sented by the m" intermediate bits retained therein, and 
a second additional encryption bit pattern converter for 
keeping said second additional code pattern and respon- 
sive to said auxiliary shift register bit pattern for pro- 
ducing said at least one additional converted encryption 
10 bit, wherein said decryption bit pattern converting 
means comprises: 
a unit decryption bit pattern converter for keeping 
said unit code pattern and responsive to said unit 
decryption shift register bit pattern for producing 
said unit converted decryption bit; 
a first additional decryption bit pattern converter for 
keeping said first additional code pattern and re- 
sponsive to said additional decryption shift register 
bit pattern for producing an intermediate con- 
verted decryption bit; 
a decryption modulo-two adder for calculating a sum 
modulo two of said intermediate converted de- 
cryption bit and the receive encrypted bit supplied 
; also to said decryption adding means during each 
local clock period to produce an intermediate de- 
; cryption bit given by the sum calculated thereby; 
a decryption shift register responsive to the local 
block pulses supplied thereto as shift pulses for 
" ' retaining, during each local clock period, m" inter- 
mediate decryption bits successively produced by 
said decryption adder to produce an auxiliary de- 
; cryption shift register bit pattern represented by 
: the m" intermediate decryption bits retained 
. therein; and 

a second additional decryption bit pattern converter 
for keeping said second additional code pattern and 
responsive to said auxiliary decryption shift regis- 
ter bit pattern for producing said at least one addi- 
tional converted decryption bit. 

22. A decrypting device as claimed in claims 18, 19, 
20, or 21, wherein said unit code pattern consists of 
binary bits, equal in number to 2 m . 

23. A decrypting device for decrypting a sequence of 
receive encrypted digits into a sequence of decrypted 
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feedforward means for supplying said unit and said at" 45 digits, said sequence of receive encrypted digits being 
least one additional converted decryption bits to substantially identical with a sequence of original en- 
said decryption adding means as said decryption crypted digits produced by an encrypting device in 
adding means input bit and said at least one decryp- response to a sequence of input data digits and a se- 
tion keying bit, respectively. quence of encryption clock pulses timing said input data 
21. A decrypting device as claimed in claim 20, said at 50 digits and said original encrypted digits with a predeter- 
least one additional code pattern being two in number mined encryption clock period, each input data digit 
and given by a first and a second additional code pat- comprising a first and a second input data bit, each 
tern, said encryption bit pattern converting means com- original encrypted digit comprising a first and a second 
prising a unit encryption bit pattern converter for keep- original encrypted bit, each receive encrypted digit 
ing said unit code pattern and responsive to said unit 55 comprising a first and a second receive encrypted bit, 
encryption shift register bit pattern for producing said said encrypting device comprising modulo-two encryp- 
unit converted encryption bit, a first additional encryp- tion adding means for calculating a first encryption sum 
tion bit pattern converter for keeping said first addi- modulo two of each first input data bit and at least one 
tional code pattern and responsive to said additional encryption keying bit to produce a sequence of the first 
encryption shift register bit pattern for producing an 60 original encrypted bits with each first original en- 



intermediate converted encryption bit, a modulo-two 
encryption adder for calculating a sum modulo two of 
said intermediate converted encryption bit and the orig- 
inal encrypted bit produced by said encryption adding 
means during said each encryption clock period to pro- 65 
duce an intermediate encryption bit given by the sum 
calculated thereby, an encryption shift register respon- 
sive to the encryption clock pulses supplied thereto as 



crypted bit given by said first sum, a second encryption 
sum modulo two of each second input data bit, said at 
least one keying bit, each first original encrypted bit, 
and a first and a second encryption adding means input 
bit to produce a sequence of the second original en- 
crypted bits with each second original encrypted bit 
given by said second sum, and a third and a fourth 
encryption sum modulo two of each first original en- 
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crypted bit and said first and said second adding means 
input bits to produce a first and a second encryption 
adding means output bit given by said third and said 
fourth sums, respectively, encryption shift register 
means responsive to the encryption dock pulses sup- 5 
plied thereto as shift pulses for retaining, during each 
encryption clock period, a predetermined number m of 
the second original encrypted bits, a first prescribed 
number mi of the first adding means output bits succes- 
sively produced by said adding means, and a second 10 
prescribed number ma of the second adding means out- 
put bits successively produced by said adding means to 
produce a unit and a first and a second additional en- 
cryption shift register bit pattern represented by the m 
second original encrypted bits and the mi first and the 15 
m2 second adding means output bits retained therein, 
respectively, encryption bit pattern converting means 
responsive to a unit and a first and at least one second 
additional code pattern for converting said unit and said 
first and said second additional shift register bit patterns 20 
to a unit and a first and at least one second additional 
converted encryption bit, respectively, and feedback 
means for supplying said unit and said first and said at 
least one second additional converted bits to said adding 
means as said first and said second adding means input 25 
bits and said at least one keying bit, respectively, 
wherein said decrypting device is responsive to a se- 
quence of local clock pulses timing said receive en- 
crypted digits and said decrypted digits with a local 
clock period equal to said encryption clock period and 30 
comprises: 

modulo-two decryption adding means for calculating 
a first decryption sum modulo two of each first 
receive encrypted bit and at least one decryption 
keying bit to produce a sequence of the first de- 35 
crypted bits with each first decrypted bit given by 
said first decryption sum, a second decryption sum 
modulo two of each second receive encrypted bit, 
said at least one decryption keying bit, each first 
receive encrypted bit, and a first and a second 40 



28 

decryption adding means input bit to produce a 
sequence of the second decrypted bits with each 
second decrypted bit given by said second decryp- 
tion sum, and a third and a fourth decryption sum 
modulo two of each first receive encrypted bit and 
said first and said second decryption adding means 
input bits to produce a first and a second decryp- 
tion adding means output bit given by said third 
and said fourth decryption sums, respectively; 

decryption shift register means responsive to the 
local clock pulses supplied thereto as shift pulses 
for retaining, during each local clock period, m 
second receive encrypted bits, mi first decryption 
adding means output bits successively produced by 
said decryption adding means, and m2 second de- 
cryption adding means output bits successively 
produced by said decryption adding means to pro- 
duce a unit and a first and a second additional de- 
cryption shift register bit pattern represented by 
the m second receive encrypted bits and the mi first 
and the im second decryption adding means output 
bits retained therein, respectively; 

decryption bit pattern converting means responsive 
to said unit and said first and said at least one sec- 
ond additional code patterns for converting said 
unit and said first and said second additional de- 
cryption shift register bit patterns to a unit and a 
first and at least one second additional converted 
decryption bit, respectively; and 

feedforward means for supplying said unit and said 
first and said at least one second additional con- 
verted decryption bits to said decryption adding 
means as said first and said second decryption add- 
ing means input bits and said at least one decryp- 
tion keying bit, respectively. 

24. A decrypting device as claimed in claim 23, 

wherein said unit and said first and said at least one 

second additional code patterns consist of binary bits, 

equal in number to 2 m , 2 ml , and 2 m2 t respectively. 
• * * * * 
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